Behavioral task
behavioral1
Sample
f009f754ef52a016f29d715ee2efc5e2f51ca02fbd5344aa3d26d7a30a233802.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f009f754ef52a016f29d715ee2efc5e2f51ca02fbd5344aa3d26d7a30a233802.exe
Resource
win10v2004-20220901-en
General
-
Target
f009f754ef52a016f29d715ee2efc5e2f51ca02fbd5344aa3d26d7a30a233802
-
Size
585KB
-
MD5
dad9ca942b9db22eb54809906092bc71
-
SHA1
ebc25725a1b5bf95f1f4d421f9c0f4e2a1fcea36
-
SHA256
f009f754ef52a016f29d715ee2efc5e2f51ca02fbd5344aa3d26d7a30a233802
-
SHA512
13de2732d8fc5c06300b4237690c5acbab937c6f38abf7b280c8428de97a780dff1f2601e7bce1e63f5f2b257bcc75520b127343d850e545472f0177bcdf1e81
-
SSDEEP
6144:BLHWzvzErkyTwjDh6nyk5jv0rQmBIE1LDUJ8nG1d3Zx+9S90sLut:l2zAIGwjDh68iE1/UJ8nAFMSiso
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
f009f754ef52a016f29d715ee2efc5e2f51ca02fbd5344aa3d26d7a30a233802.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE